x2go-dev March 2011

x2go-dev@lists.x2go.org

24 participants
29 discussions

Re: [X2go-dev] Bump LDAP / AD / Pulseaudio related login issues
by Robert Schumann 23 Mar '11

23 Mar '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Date: Wed, 23 Mar 2011 09:10:58 -0000 (GMT) > From: "--[ UxBoD ]--" <uxbod(a)splatnix.net> > Robert, > as John has mentioned we use LDAP with AD in our environment. The local/central database holds details pertinent to the session state eg. mounted shares; whereas the authentication is performed against whatever you have configured in PAM. Have you integrated Linux authentication with AD yet ? Phil, thanks for your answer. Yes I have already integrated AD into my Linux boxes. The user is authenticated through winbind. Everything works like expected, all the NX clients and plain SSH - for the login I have to use a scheme like DOMAIN\USER or USER@DOMAIN because we have a multi-trusted domain environment here. I cannot enable "use default domain" in Samba therefore. For plain SSH I can run it like that: ssh 'domain\user'@box and it's working. For x2go no matter if I use "\" or "@", they both seem to result in some trouble (not created folders and links on the box, or if they are created then the "\" is missing and the session ID refers to a non existing folder). Most stuff is called from the client, but when ending the session a perl script on the server fails too, because it cannot find the cmdoutput file IIRC. Cheers Robert - -- |-----------------------------------------------------address-+ | work: jacob-und-wilhelm-grimm-zentrum | geschwister-scholl-str. 1, 10117 berlin | postal: humboldt-universität zu berlin | computer- und medienservice | unter den linden 6 | 10099 berlin |-----------------------------------------------------contact-+ | mail: schumann(a)informatik.hu-berlin.de | icq: 93163687 | xmpp: betulichergutmensch(a)googlemail.com | huchat: schumanr(a)chat.hu-berlin.de | phone: +49(0)30-2093-70133 |-----------------------------------------------------gpg/pgp-+ | key: remembrance.de/gpg/0xA5A5FAA2.asc | fprint: 9220-9732-7390-7A0C-5623-3336-4233-FDF8-A5A5-FAA2 |-------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2J1yMACgkQQjP9+KWl+qJVJwCeKnpWKu57zfhII8p5Ew/fRDtv NyMAn2NmEqzQPjQGvXU8n85smBJY3d3M =gmmM -----END PGP SIGNATURE-----

1 0

Bump LDAP / AD / Pulseaudio related login issues
by Robert Schumann 23 Mar '11

23 Mar '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heyho guys, since nobody responded to my mail I sent on the 7th of February I'd like to bring that topic up again. While I'm totally agreeing with you that there are other important problems to solve, I consider the lack of a proper login in bigger networks a major showstopper for your project. It can only be of your interest, that people in a LDAP/AD configuration with usernames like DOMAIN\USER are able to use your services. I pointed out, that it's probably just a few fixes away from a solution. I'm understanding that your test case focusses on local users in some kind of databases, but however... I hardly see this as a "normal environment" in every company or organization which might want to use x2go. Really nobody is using local user databases on some Linux machine for storing user information and accounts except for Bob and Alice maybe. If any of you likes to investigate this issue I can provide an writable x2go server and a domain account to test things out and find fixes for that. Best regards Robert - -- |-----------------------------------------------------address-+ | work: jacob-und-wilhelm-grimm-zentrum | geschwister-scholl-str. 1, 10117 berlin | postal: humboldt-universität zu berlin | computer- und medienservice | unter den linden 6 | 10099 berlin |-----------------------------------------------------contact-+ | mail: schumann(a)informatik.hu-berlin.de | icq: 93163687 | xmpp: betulichergutmensch(a)googlemail.com | huchat: schumanr(a)chat.hu-berlin.de | phone: +49(0)30-2093-70133 |-----------------------------------------------------gpg/pgp-+ | key: remembrance.de/gpg/0xA5A5FAA2.asc | fprint: 9220-9732-7390-7A0C-5623-3336-4233-FDF8-A5A5-FAA2 |-------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk2IjrgACgkQQjP9+KWl+qKvMACcDksNkkhnLmrN5HmjAlcAUE4i GW4An1kDm46a3QIkhYPAZ62sfr+NGjqm =7DSP -----END PGP SIGNATURE-----

4 3

Trinity and X2go
by Mike Gabriel 22 Mar '11

22 Mar '11

Hi x2go-dev, I have just started upgrading my always-as-stable-as-possible-Debian-office-computer to Debian squeeze and installed Trinity (KDE3.5 fork). Not that my personal todo list and probably those of others are not long enough already, but we should definitely add Trinity support to X2go. @John: in one of your postings lately I may remember you mentioning Trinity in relation to X2go. Do you have any patches or a howto for an installation. Basically, I think an adaptation of x2gokdebindings and the x2gostartagent script shouldn't be too difficult... Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0xB588399B mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 3

Wishlist: x2gofeatures query before session start
by Mike Gabriel 22 Mar '11

22 Mar '11

Hi there, Here is a feature request proposal for the post-Baikal release (Rebun): The handshake on session start should be extended in the following way: o login as user o call a script x2gofeatures (or similar) o this script replies with some file format that states - user may / must not start an X2go session - user may / must not start in rootless/desktop mode - available commands to execute (KDE, TERMINAL, /usr/bin/xterm...) - user may / must not print - user may / must not use audio - ... o the client should obey to this returned list of features o if the user tries to hack some feature that he/she is not allowed to use, the server of course also has to deny this feature (and maybe even the whole session) Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0xB588399B mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

5 13

Torn down TCP connections
by --[ UxBoD ]-- 21 Mar '11

21 Mar '11

Hello All, Am facing a problem where the three SSH tcp connections are being torn down. Personally I am using a Cisco router and reflexive ACLs and can see what is happening. I have tried configuring SSHD on the remote server side with the following: TCPKeepAlive no ClientAliveInterval 30 ClientAliveCountMax 3 This appears to have resolved the issue with File&Print but the PulseAudio connection is still being torn down. Have thought about removing the ClientAliveCountMax but why would three attempts fail when I was still connected to my X2go session ? This is so frustrating and cannot believe nobody else has hit it; unless everybody is running it across a LAN ??? -- Thanks, Phil

2 6

Re: [X2go-dev] Wishlist: x2gofeatures query before session start
by Dick Kniep 19 Mar '11

19 Mar '11

Hi Morty, I totally agree with you on this. As a matter of fact we are developing a script that checks serverside whether one is allowed to start a certain command. It uses the normal Linux users and groups and there is also a maintainance option. Within 4 weeks this should be completely finished and I can send you the code together with the patches of the server. As soon as it is ready (and tested) I will send the patch also to Mike and Alex and ask them to incorporate it in the main distribution. But again, it will take some time. Also, in the pyhoca-gui there is a possibility (with some tweeking of the ssh config) to make a connection to the client with a key and after that a logon with a user. Mike has done a wonderful job on that one! Dick Kniep -----Oorspronkelijk bericht----- Van: Moritz Strübe <Moritz.Struebe(a)informatik.uni-erlangen.de> Verzonden: za 19-03-11 19:10:05 Aan: x2go-dev(a)lists.berlios.de; Onderwerp: Re: [X2go-dev] Wishlist: x2gofeatures query before session start Hi Mike, to make this reasonable there must be ways to actually enforce this. Currently a little tweaking of the client will allow you to circumvent any of these rules: Start x2goagent "manually" - the db is only convenience, desktop-mode is client-related only, you can patch the client to start any command you wish, audio is only a matter of setting the right environment variables, etc. Basically x2go is just an optimized x-forwarding. So doing rights-control on this level would be to block the main road and leave the side roads open. While this might be enough for a lot of scenarios it might also let administrators think, that there rules are actually enforced. All in all it would be just as safe as doing all the rights-management in the client.... The right way of doing this, would be to the learn about Linux system administration and use the sufficient tools already provided to you (e.g. ACLs). Everything else creates false feeling of security. Cheers Morty Am 19.03.2011 17:11, Mike Gabriel schrieb: Hi there, Here is a feature request proposal for the post-Baikal release (Rebun): The handshake on session start should be extended in the following way: o login as user o call a script x2gofeatures (or similar) o this script replies with some file format that states - user may / must not start an X2go session - user may / must not start in rootless/desktop mode - available commands to execute (KDE, TERMINAL, /usr/bin/xterm...) - user may / must not print - user may / must not use audio - ... o the client should obey to this returned list of features o if the user tries to hack some feature that he/she is not allowed to use, the server of course also has to deny this feature (and maybe even the whole session) Greets, Mike _______________________________________________ X2go-dev mailing list X2go-dev(a)lists.berlios.de https://lists.berlios.de/mailman/listinfo/x2go-dev !DSPAM:4d84f17d19577730779061!

1 0

Questions about the source
by Tyler Jameson Little 19 Mar '11

19 Mar '11

I am developing a way to pipe NX over HTTP (client and NodeJS server module), and I noticed that x2go is a full-featured solution based on NX technology. I already asked about this on the users mailing list and I was directed here by Mike Gabriel. I'll try to not repeat anything that was already answered. Mike informed me that the x2go team is already developing browser plugins, but I wanted a way to integrate a remote session into a browser using pure HTML5 and JavaScript. Anyway, my question has more to do with the underlying NX server source. Has the x2go team significantly modified the base NX server code? If so, where can I get the full source code for the server (not just the scripts)? Mike led me to this website: http://i4git.informatik.uni-erlangen.de/, but I wasn't able to figure out how to clone the repositories. I don't mean to be too forward, especially since I'm new to this list, but has the x2go team considered using a free code sharing site like GitHub? I will mostly want to be looking at where the data gets sent to the client, but I'm not sure where the best place to look for that would be. Thank you so much for your help!

4 6

auth.log grows
by tony.blue.mailinglist＠gmx.de 19 Mar '11

19 Mar '11

Hello Mailinglist, x2goserver-home grows my auth.log-file. Continious I geth the following messages: ... Mar 6 06:40:02 servername sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/x2gopgwrapper listsessionsroot servername Mar 6 06:40:29 servername sudo: last message repeated 5 times Mar 6 06:40:29 servername CRON[5578]: pam_unix(cron:session): session closed for user munin Mar 6 06:40:32 servername sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/x2gopgwrapper listsessionsroot servername Mar 6 06:41:37 servername sudo: last message repeated 13 times ... My system: ubuntu-server with debian x2go-packages. Thank you! -- NEU: FreePhone - kostenlos mobil telefonieren und surfen! Jetzt informieren: http://www.gmx.net/de/go/freephone

6 6

Re: [X2go-dev] [X2go-user] Question about the source
by Mike Gabriel 19 Mar '11

19 Mar '11

Hi Tyler, I will divert this posting to x2go-dev(a)lists.berlios.de. Please let us continue the discussion there. On Sa 19 Mär 2011 03:24:51 CET Tyler Jameson Little wrote: > I downloaded a copy of the source by using this command: git clone git:// > code.x2go.org/x2goserver.git The site is still under construction. The package has been uploaded for evaluation by two guys from university of Erlangen, Germany. For now, please refer to their Git site for the other packages (x2goagent, nxlibs etc.): http://i4git.informatik.uni-erlangen.de > I want to try to make a module on NodeJS, and I had assumed that I would get > a bunch of source files written in C or C++, but what I got was a bunch of > Perl scripts. > > Is that all the server is? Am I missing something? My goal is to make an > NX server that can run over a simple TCP or HTTP server and I was going to > write a client for display in the browser. The X2go developers are already working on a QtPlugin based browser plugin. Maybe you should take a look at that. Code is included in the x2goclient project: http://i4git.informatik.uni-erlangen.de/x2goclient.git/ > From my research, X2Go is > supposed to be the most fully featured, open source NX implementation out > there. I downloaded the source from NoMachine.com for part of their server > and it was as I expected, a bunch of C and C++ sources. > > With NodeJS, I have a couple of options: > > - Include a C++ module by exporting certain functions > - Write the source in server-side JavaScript > - Use the exec command to execute scripts on the command-line > > > If the server really is that simple, then my project will be a lot less > painful and will take me a lot less time than expected to make work with > NodeJS. If the server really is this simple, how does it compare > performance-wise with the open source version from NoMachine? I want to > possibly have several NX servers piped through a single webserver where each > NX server is running in it's own VM, so efficiency is what I'm after. I am > primarily looking at just running this on Ubuntu, so this package looked > like it was the right one (debian). For Ubuntu there is the development ppa of university of Erlangen: https://launchpad.net/~siretart/+archive/x2go > Any help that any of you could offer would be much appreciated. I'm excited > to start playing with this software!! Don't worry, anything I produce will > be Open Source, regardless of whether I do a complete rewrite. Note that most of components of X2go will become AGPL (http://www.gnu.org/licenses/agpl.html) before the next release (,,Baikal''). Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0xB588399B mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug: xmodmap should be set by client
by Moritz Struebe 18 Mar '11

18 Mar '11

Hi there, I just had some trouble with my alt-gr-key. There reason was, that after the update to squeeze the server had a different xmodmap then my client ( http://daniel-lange.com/archives/45-Fixing-FreeNX-NoMachine-NX-keyboard-gli…) . Probably it would be a good idea if the x2go-server-client makes sure the server-Xserver has the same xmodmap as the client-Xserver. Any other Ideas or comments? Cheers Morty -- Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter) Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme) Friedrich-Alexander-Universität Erlangen-Nürnberg Martensstr. 1 91058 Erlangen Tel : +49 9131 85-25419 Fax : +49 9131 85-28732 eMail : struebe(a)informatik.uni-erlangen.de WWW : http://www4.informatik.uni-erlangen.de/~morty

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev March 2011